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(54) Prepaid internet access system and method 



(57) A business method for providing Internet ac- 
cess to users comprises requesting access to the Inter- 
net via the public telephone network or other Internet 
access infrastructure such as DSL, cable, wireless, or 
dedicated line, presenting a user name and password 
and then verifying the user name, password, account 
activation status and account time balance if the ac- 
count is for a fixed amount of on line time, or date of 



expiration if the account is for a fixed elapsed time. The 
system acknowledges user access by identifying the ac- 
count time balance or expiration date. This is followed 
by allowing access to the Intemet and using the Internet 
access for a session time of not more than the account 
time balance or up to the temiinal date. After that the 
access time is disconnected. A new account time bal- 
ance is calculated if appropriate and the time balance, 
if any, is communicated to the user. 
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Description 

BACKGROUND OF THE INVENTION 

FIELD OF THE INVENTION: 5 

[0001 ] This invention relates generally to nrietered In- 
ternet use and more particularly to a business nnethod 
providing access to the Internet through prepaid con- 
tractual arrangements. io 

DESCRIPTION OF RELATED ART: 

[0002] The following art defines the present state of 
this field: 15 
[0003] Walker et aL, U.S. 5.737,414 teaches a billing 
and collection system for enabling payment for a service 
provided over a data network by billing a customer for 
a telephone connection to a shared revenue billing net- 
work where the telephone connection to the billing net- 
work regulates access to the service provided over the 
data network, comprising: a data network including at 
least one user on-line service provider presenting at 
least one service for on-line access by a user with a user 
computer through the data network, a billing network 
and an access management computer for controlling 
access to the on-line service provider and billing the us- 
er for access to the on-line service provider, the access 
management computer communicating with the data 
network for enabling and terminating access to the on- 3o 
line service provider through the user computer where- 
by the billing network shares revenues for the telephone 
connection with the on-line service provider 
[0004] Mansey, U.S. 6.023,499 teaches a method 
and technique for real-time monitoring of charges for us- 35 
ing a communication network service, thereby enabling 
a user to continuously know the charges incurred during 
each usage. The user also is able to define a charge 
limit prior to using the service and the usage terminates 
automatically when the accumulated charge reaches 40 
that limit. The present method is particularly adapted to 
monitoring charges associated with a telephone confer- 
ence call. 

[0005] The prior art teaches the use of the Internet for 
billing and for real time monitoring of charges, and fur- 
ther to enable the user to define a charge limit prior to 
using such services and especially with the use of a tel- 
ephone conference call, but does not teach the user of 
the Internet for providing a service to customers who 
will, in turn act as ISP's for their clients in a prepaid In- 
ternet access method. The present invention fulfills 
those needs and provides further related advantages as 
described in the following summary. 

SUMMARY OF THE INVENTION 55 

[0006] The present invention teaches certain benefits 
in construction and use which give rise to the objectives 
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described below. 

[0007] The present invention defines a novel busi- 
ness method for providing Internet access to users. It 
comprises: requesting access to the Internet via the 
public telephone network, presenting a user name and 
password and then verifying the user name, password, 
account activation status and account time balance if 
the account is for a fixed amount of on line time, or date 
of expiration if the account is for a fixed elapsed time. 
The system acknowledges user access by identifying 
the account time balance or expiration date. This Is fol- 
lowed by allowing access to the Internet and using the 
Internet access for a session time of not more than the 
account time balance or up to the temninal date. After 
that the access time is disconnected. A new account 
time balance is calculated if appropriate and the time 
balance, If any, is communicated to the user 
[0008] A primary objective of the present invention is 
lo provide an apparatus and method of use of such ap- 
paratus that provides advantages not taught by the prior 
art. 

[0009] Another objective is to provide such an inven- 
tion capable of managing a large number of Internet ac- 
counts. 

[0010] A further objective is to provide such an inven- 
tion capable of enabling a primary customer to allocate 
a large number of accounts for Internet usage to his cli- 
ents. 

[0011] A still further objective is to provide such an 
invention capable of providing a time of use purchase 
standard as well as an end-time standard. 
[0012] Other features and advantages of the present 
invention will become apparent from the following more 
detailed description, taken in conjunction with the ac- 
companying drawings, which illustrate, by way of exam- 
ple, the principles of the invention. 

BRIEF DESCRIPTION OF THE DRAWINGS 

[0013] The accompanying drawings illustrate the 
present Invention. In such drawings: 

Figure 1 is a flow diagram of the preferred embod- 
iment of the invention; 

Figure 2 is a flow diagram of the system logic used 
for checking the current status of each user ac- 
count; 

Figure 3 is a representation of a computer screen 
showing the main menu; 

Figure 4 is a representation of a computer screen 
showing the account batch set up table; 

Figure 5 is a representation of a computer screen 
showing the account generator table; 
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Figure 6 is a representation of a connputer screen 
showing the accounts table; 

Figure 7 is a representation of a conaputer screen 
showing the call records table; 

Figure 8 is a representation of a connputer screen 
showing the RADIUS logs table; 

Figure 9 is a representation of a computer screen 
showing the report menu; 

Figure 10 is a representation of a computer screen 
showing the configuration menu; 

Figure 11 is a representation of a computer screen 
showing the servers table; 

Figure 12 is a representation of a computer screen 
showing the attribute configuration table; and 

Figure 13 is a representation of a computer screen 
showing the roaming servers table. 

DETAILED DESCRIPTION OF THE INVENTION 

[0014] The above described drawing figures illustrate 
the invention in at least one of its preferred embodi- 
mentS; which is further defined in detail in the following 
description. The present invention is a business method 
for providing Internet access to subscribers (users) to 
an Internet access service. The method comprises a set 
of sequential steps. Figs. 1 and 2 define the primary log- 
ic flow of the present method and Figs. 3-15 define sev- 
eral computer screens providing enablement of the 
present method. 

[0015] Internet service providers (ISPs) enable ac- 
cess to the Internet for their clients or customers. There 
are a large number of ISPs and they differentiate them- 
selves by offering various custom services. Some ISPs 
offer free access to the Internet while others charge a 
flat monthly fee. The present method provides Internet 
access as a service to those wishing to provide Internet 
access to their clients, in other words, to act as an inter- 
net service provider. In this method, an ISP provides ac- 
cess to the Internet to a client base. The client base com- 
prises companies or individuals who^ in turn, wish to pro- 
vide Internet access to theircustomers, employees, chil- 
dren, etc. It is a two or three tiered business model com- 
prising the ISP, the ISP's clients, and the client's cus- 
tomers or users. The user may obtain the service direct- 
ly from the ISP directly or may obtain it from a client of 
the ISR as a paid for service, a give-away, a premium, 
a gift or other means of transfer for this valuable asset. 
Ultimately, the sought good (actually a service) is Inter- 
net access. 

[0016] In a first embodiment, wherein Internet access 
is obtained on a metered basis, a user having a need to 
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access the Internet, or to provide such to others, re- 
quests access through the ISP via the public telephone 
network orothertelecommunication channel. After mak- 
ing the telephone connection the service prompts the 
5 user to enter a user name and password. The ISP, upon 
receipt of the user name and password, verifies the user 
name, password, account activation status and account 
time balance. If all is conrectly verified, the ISP acknowl- 
edges user access by identifying the account time bal- 
10 ance of the user's account and then opens access to 
the Internet for the user. The user then proceeds to take 
advantage of this Internet access for a session time of 
not more than the account time balance of his account. 
Upon completion of the Intemet session, or upon being 
15 cut-off at the end of the allowable time, the user discon- 
nects from the Internet. At this time, the service calcu- 
lates a new account time balance and identifies this bal- 
ance to the user 

[0017] in an alternate embodiment of the present in- 
vention, the same procedure is followed, except the ac- 
count is prepaid for a period of time without regard to 
the amount of time actually connected to the Internet. In 
this approach, the userwill not be cut-off except if usage 
is continued or attempted at a date subsequent to the 
date of expiration of the account. 
[0018] in this second embodiment of the invention, a 
user having a need to access the Intemet, or to provide 
such to others, requests access through the ISP via the 
public telephone network or other telecommunication 
channel. After making the telephone connection the ISP 
prompts the user to enter a user name and password. 
The ISR upon receipt of the user name and password, 
verifies the user name, password, account activation 
status and account termination date. If all is correctly 
verified, the ISP acknowledges user access by identify- 
ing the temnination date of the user's account and then 
opens access to the Internet for the user The user then 
proceeds to take advantage of this Internet access for 
as long as desired but not exceeding the date of expi- 
ration of the current account. Upon completion of each 
Internet session, or upon being cut-off at the end termi- 
nation date, the user disconnects from the Internet. At 
this time, the service again states the termination date 
to the user, or states that the tennination date has now 
been exceeded. 

[0019] The present invention is further described as 
providing the present invention as an Internet based op- 
erational system managed by a system operator (Sys- 
op). The system and method delivers a highly effective 
prepaid Intemet access solution for primary customers 
(Pricus), while providing ease of use through a graphical 
user interface that offers quick access to all of the tools 
necessary for its operation. 

[0020] Pricus operations are initiated using a compu- 
ter screen and pointing device such as a mouse or roller 
ball, with screen icons on the users desktop or as se- 
lected from a Windows® program menu. This brings up 
a main menu which provides access to the most com- 
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mon functions and three submenus: reports, configura- 
tion, and utilities. Other options on the main menu in- 
cludes view logs, which are created automatically when 
an account is not authenticated, a view calls option 
which shows a list of radius accounting information, in- 
cluding start and stop records, and a view prepaid ac- 
counts option which lists all of the prepaid accounts 
along with user identification and use information about 
each account. 

[0021] A prepaid Pricus account is created by forming 
an account batch, or master account. Next, a generate 
accounts option enables creation of plural prepaid ac- 
counts which are tied to the account batch. These pre- 
paid accounts are used by secondary customers (Sec- 
cus), the clients of the Pricus. All generated Seccus ac- 
counts are associated with a unique batch number so 
that they can all be deactivated at once by deactivating 
the account batch, and they can be deleted together. 
The batch number permits tracking and reporting so thai 
the Pricus is appraised of his/her status. 
[0022] To create a new batch , the Pricus accesses the 
end of the existing set of batch records and types a de- 
scription which Is related to the Pricus. The batch 
number is automatically assigned. Additional infonna- 
tion can be entered along with comments if desired. A 
batch expiration date is optional, but may be used. The 
batch may be activated or deactivated by a simple point- 
ing device. These options provide control over all the 
accounts associated with the batch. 

Other options include: 

Reset account time. 

[0023] If the reset account time box is checked, a pre- 
paid internet access system (PIAS) resets the time on 
every account in the batch to whatever Is specified in 
minutes on this screen. This means that each account 
in the batch will have a maximum session timeout per 
day. 

Web discounts. 

[0024] This is available for providing discounts on ac- 
counts based on web sites visited. 

Time discounts. 

[0025] When this option is activated, accounts in this 
batch can receive a reduced rate for usage during non- 
peak times. The discounts received are based on what 
has been entered in the discounts by day and time 
screen under the configuration menu. 
[0026] When accounts are generated, whatever num- 
bers are in the account duration field are saved to the 
batch screen forthe selected batch. Currently, days and 
months on the batch screen are used only for reference. 
However, minutes on the batch screen is used as the 



maximum account time when calculating reports. 
[0027] While there Is no limit to the number of Seccus 
accounts that can be generated under a batch number, 
it is advisable to create a new account batch each time 

5 prepaid accounts are generated. This makes Seccus 
accounts easier to track, report, and manage. 
[0028] Each account batch is given a description so 
as to distinguish between them. A quantity of accounts 
Is designated for each batch. Random user names and 

^0 password numbers are automatically generated for 
each account. During this process the generator checks 
to assure that the user name is unique. 
[0029] A concurrent login limit may be selected and is 
defined as the number of separate individuals on line in 

'5 the account simultaneously with the same user name. 
In order for concurrency control to work, information 
must be entered defining all network access server 
ports. Concurrency control is most often used when of- 
fering unlimited access accounts, because with limed 

20 accounts, even when multiple sessions are active at the 
same time, the combined usage time is deducted from 
an account. 

[0030] To create unlimited access accounts a speci- 
fied number of days from first use are entered in the ac- 

25 count duration in days field. Alternatively, one may enter 
a numberforaccount duration in months. This will create 
an account that will expire on the last day of the month, 
a given number of months after first use. So a two-month 
account first used sometime in July would expire on Au- 

30 gust 31. 

[0031] To create timed accounts the number of min- 
utes to be used is entered into the account duration in 
minutes field. Account users can connect or disconnect 
any number of times as long as the sum of all their time 

55 online is less than the total of minutes allocated. When 
the user is authenticated, the number of minutes re- 
maining in their account Is multiplied by 60 and this 
number of seconds is sentto a NAS as the session-time- 
out and/or the ascend maximum time attribute so that 
the user will be disconnected if the total time on line is 
reached. When the user disconnects, the session time 
in the accounting packet is returned from the NAS and 
is divided by 60, to provide minutes subtracted from the 
remaining time on the account. In this way, account us- 

^5 age is rounded to the minute. When the account time 
remaining reaches zero, the account will no longer be 
authenticated. 

[0032] A third alternative is to create an account that 
may be used for a set number of minutes and Is restrict- 
5C ed to also be used within a set number of days or months 
from first use. 

[0033] Accounts can be generated with data added to 
the beginning or the end of the user identification 
number, or both, by entering data Into the addtext before 
55 user Identification and/or the add text after user identi- 
fication fields. This is most often used for working with 
proxy radius where the user identification needs to have 
a realm or domain attached to it. 
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[0034] The process of creating "top-up" accounts us- 
es the same account generator that is already included 
for creating standard accounts. Then, if the active box 
on the batch is unchecked, the top up accounts cannot 
be used by themselves, but the balance on the account 5 
will be available for transfer to another account. There 
is a web site that basically has four fields-a username 
and password for each account plus a submit button la- 
beled "top-up" or transfer balance. 
[0035] After the user enters numbers for all four fields 
and then pushes the button ^ the account balance is 
transferred from the first account to the second. While 
in this configuration, the balance from any account can 
be transferred to any other account. In addition, there is 
a checkbox on the batch screen so that certain batches 
are designated so that only those batches can be used 
for topping up. Additionally, there is a second check box 
on the batch that designates which account batches can 
have lime added to them. This allows the creation of es- 
sentially four types of batches of accounts: standard; 
where balances can not be added to or transferred from, 
except from nonmal usage, accounts used for top-up on- 
ly, rechargeable accounts, and both; where balances 
can bo recharged or transferred. 
[0036] Note that it can also allow balance transfers as 
part of the Interactive Voice Response (IVR) system, 
with users entering usernames and passwords on their 
telephone keypad and pressing a specified number to 
complete the transfer. 

[0037] Once accounts have been generated, they can 
be viewed and modified. Timed accounts include a 
number in the minutes remaining field, while unlimited 
access accounts do not. Timed accounts may also have 
a date in the expiration date field if such limit has been 
selected. Unlimited accounts or timed accounts that 
have a day or month limit will have an expiration date 
that is automatically cabulated and the account will be 
automatically deactivated when the expiration date is 
reached. Once an account has been used, the number 
of days or months allowed is added to the date of first 
usage and this is automatically entered in the expiration 
date field. 

[0038] If the Active box is not checked, the account 
will not authenticate. All of the radius accounting records 
received can be viewed. If an authentication request is 
received but cannot be authenticated because the ac- 
count is not active, an entry is made in the log. Reports 
are reasonably self-explanatory. Reports are automati- 
cally generated and include information about the ac- 
count, when it has used and for how long. Records are 
compiled with summary statistics. 
[003d] A utilities menu is straightforward. Clicking on 
"delete radius logs" removes all the logs from the data- 
base. Clicking on "delete call records" not only removes 
the records in the calls table, but also first runs the batch 55 
processes necessary for accurately tracking unlimited 
access accounts. The Pricus also has the option of de- 
leting radius logs and call records that are older than 60 
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days or before a specified date. 
[0040] One of the features under the utilities menu is 
a bonus time generator utilized by selecting the batch 
number, number of minutes, and number of times, and 
clicking on either add-random, add-distinct, or add-all. 
Add-random adds the given number of minutes to a ran- 
domly chosen account in the selected batch and repeat 
adds this amount of time to a randomly chosen account 
for the given number of times. Therefore, the total 
amount of time added to the batch will be the number of 
minutes multiplied by the number of times. This enables 
control of exactly how much time is being added overall. 
[0041] The add-dlstinct option is exactly like the add- 
random option with one exception; it will not add time to 
the same account more than once. So while accounts 
are still chosen randomly, once time is added to an ac- 
count, add-distinct will not add time to this same account 
again. 

The add-all button adds the number of minutes to all of 
the accounts in the batch. Each time an account is au- 
thenticated there are two accounting records created 
and thus two entries in the call records; a start record 
and a stop record. 

[0042] The options on the configuration menu arc only 
used when first setting up the system or when making 
some change to the configuration, such as adding ad- 
ditional servers, configuring proxy radius, or changing 
the attributes of dial-up accounts. 
[0043] The first option on the configuration menu links 
to web discounts. It is available for providing discounts 
on accounts based on web sites visited. Also available 
is time discounts. When checked, accounts in this batch 
can receive a reduced rate for usage during non-peak 
days or times. The discounts received are based on 
what has been entered in the discounts by day and time 
screen under the configuration menu. The next option 
links to the servers form. Entries include a name, IP ad- 
dress, and shared secret in this form for each NAS that 
will be sending requests to the system. The name of the 
server may be any name, but the IP address must be 
correct and the secret is case sensitive. 
[0044] In order to make it easier to get data into the 
NAS ports screen, the update button populates the NAS 
ports table with data from the call records, and it will not 
create duplicates. So instead of manually entering all 
the NAS ports during setup, an ISP may just wait for 
some call record data (radius accounting packets) to ac- 
cumulate and then press the update button. ISPs with 
many ports can save a lot of time using this feature, and 
perhaps more importantly, the data will be entered ac- 
curately. 

[0045] The attribute configuration table is whore you 
add PPP attributes to the list of those returned when an 
account is authenticated, or change existing attributes 
such as the maximum session time or idle timeout. Note 
that when an account is authenticated, the system re- 
turns either the value of the session timeout listed here 
or the amount of time remaining on a timed account; 
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whichever value is smaller. Therefore, if the session 
timeout is shorter than the total time left for an account, 
the user will be disconnected when the maximum ses- 
sion timeout is reached, but will still have time remaining 
on their account and can reconnect. 
[0046] Stand-alone applications will not need to use 
proxy radius. When the system is used as an add-on to 
an existing radius system, such that the system receives 
proxy requests from another server, these forms are not 
used. However, sending proxy requests is available as 
an option, and these fomns are used as called for. The 
account generator, supports adding domain information 
to generated accounts. 

[0047] The system also includes a web site interface, 
which runs on Microsoft IIS®, so that Seccus can check 
the time remaining on their accounts. By typing in their 
user name and password, the Seccus can see on what 
day their account will expire and how many minutes are 
available on Iheir account when Ihey togged on. There 
is also an administrative website that allows a Pricus to 
operate and configure the system remotely. 
[0048] While the invention has been described with 
reference to at least one preferred embodiment, it is to 
be clearly understood by those skilled in the art that the 
invention is not limited thereto. Rather, the scope of the 
invention is to be interpreted only in conjunction with the 
appended claims. 



the method comprising the sequential steps: 

requesting access to the Internet through at 
least one of a public telephone network, a DSL 
system, a cable system, a wireless communi- 
cating system^ and a dedicated line; 
presenting a user name and password; 
verifying a user name, password, account acti- 
vation status and account time balance; 
acknowledging a user access by identifying an 
account time balance and expiration date: 
opening user access to the Internet; 
using Internet access for a session time of not 
more than one of the account time balance and 
expiration date; and 

disconnecting Internet access at a time not ex- 
ceeding the account time balance. 

4. The method of claim 3 comprising the further steps 
of accessing a report, configuhng a utilities menu; 
viewing a log; viewing a summary of calls and view- 
ing a summary of prepaid accounts. 

5. The method of claim 3 comprising the further steps 
of fomning an account batch; creating plural prepaid 
accounts; and tying the prepaid accounts to the ac- 
count batch. 



Claims 

1 . A business method for providing internet access, 
the method comprising the sequential steps: 

requesting access to the Internet through at 
least one of a public telephone network, a DSL 
system, a cable system, a wireless communi- 
cating system, and a dedicated line; 
presenting a user name and password; 
verifying a user name, password, account acti- 
vation status and account time balance; 
acknowledging a user access by identifying an 
account time balance and expiration date; 
opening user access to the Internet; 
using Internet access for a session time of not 
more than one of the account time balance and 
expiration date; 
disconnecting Internet access; 
calculating a new account time balance; and 
communicating the new account time balance 
to the user. 

2. The method of claim 1 comprising the further steps 
of accessing a report, configuration information and 
utilities menu; viewing a log; viewing a summary of 
calls; and viewing a summary of prepaid accounts. 

3. A business method for providing Internet access, 
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6. The method of claim 5 comprising the further step 
of assigning a user, user name and password to 
each of the prepaid accounts. 

7. The method of claim 5 comprising the further step 
of defining a login limit. 

8. The method of claim 3 comprising the further step 
of actuating at least a portion of the accounts. 

9. The method of claim 8 comprising the further step 
of assigning a total time on the Internet to each of 
the asset balances of the active accounts. 



10. The method of claim 8 comprising the further step 
of assigning a total elapsed duration of time to each 
^5 of the asset balances of the active accounts. 



11. The method of claim 8 comprising the further step 
of assigning a total time on the Internet and a total 
elapsed duration to each of the asset balances of 
the active accounts. 



12. The method of claim 3 comprising the further step 
of viewing and modifying at least one of the ac- 
counts. 

13. The method of claim 3 comprising the further steps 
of creating a summary of activities of each of the 
accounts; preparing reports; and storing records for 
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such accounts. 

14. The method of claim 1 comprising the further step 
of assigning discounts and variable rates. 

5 

15. The method of claim 1 comprising the further steps 
of assigning top-ups and recharging accounts. 

16. The method of claim 1 comprising the further step 
of assigning a bonus time generator. 
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